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The general solution of keyed columnar transposition ciphers 
requires as a first step the proper juxtaposition of two sequences 
of cipher text. The choige of sequences for examination is made 
from the "hat" diagram which has been described by Gaines (4), 
One column of the diagram, usually the first, is chosen as a base 
and the others placed next to it, one ata time, The cryptanalyst 
examines each of the sets and decides which one is best, This one 
is subjected to further experimentation, A text as recent \as Eyraud 
(3) makes this choicé on the basis of what "looks good" to the 
cryptanalyst, » This is not a very satisfactory procedure for the in- 


_ experienced analyst nor is it good for an experienced analyst work- 


ing with a language in which he is not fluent, It cannot, of course, 
be used in programming electronic data processing machinery, 
should that be desirable or necessary. A valid method for quant - 
ifying the probability of occurrence of the digraphs formed by juxta- 
posing two columns of plaintext is required, This paper presents 
tables of the conditional probabilities of sequent plaintext letters for 
English, French, German, Italian, Russian, and Spanish. Tables of 
relative logarithmic probabilities are also provided, 

-Baudoin (1) and Gaines (4) both refer to frequency charts of plain- 
text digraphs to obtain scores for the digraphs formed when match- 
ing columns, The scores for the individual digraphs are then added 
together to yield a figure of merit for each juxtaposition, For ex- 
ample, following Gaines, we find 


L 8 2 10 rn 
EU 7 EY 17 EN ll EX 17 EG 20 
NS 51 NT IO NN 9 NG 75 NG 75 
TO WTA 56 TS 32 TG 1 TE % 
HE 251 HE 251 HE 251 HE 251 HO 46 
vU vI 19 VI 19 VO 6 VI WW 
cy cD CR 7 Cl 18° 6G (22 
CE 55 CE 55 CA 44 ec 12 CR ? 
Ol 13 Ox OS 37 OR 113 OL_1? 

488 308 “Hi0 490 250 


This procedure is patently false, For, suppose the base column 
contained a Q, and the matching letter were U, then the score for 
this digraph would be 20, Only 20 points for QU, but 124 points for 
TA !! While TA is an acceptable combination, all cryptanalyst know 
that in English, QU is the "best" combination, Something must be 
wrong with this method of scoring, One fault of the method is that 
it fails to take into account the fact that a Q is present in the base 
column, The tables used by Baudoin and Gaines give the relative 
frequency of Q equal to about 0,2 percent, But, there ig a Q in the 
base column, Its relative frequency is certainly much greater than 


0.2 % (for a column 10 letters long the relative frequency would be 
10 %). Besides, the method has another drawback, The probability 
of occurrence. of two independent events is the product of their ind- 
ividual probabilities (2). So, we should multiply the scores, not add 
them. This fact was recognized by Sacco (6), but he elects to add the 
scores simply because it is easier todo, We will circumvent this 
difficulty by using a well known property of logarithms, 

A better method for handling the scoring has been suggested by 
Wolfe (7). He uses a table of "the probability of any second letter 
of a digraph when the first letter is known." But, his table does not 
contain the true conditional probabilities that are required. They do 
not take into account the condition that the U found in the second 
column may not be the right one, 
\ An analysis of the situation suggests that the question to be 
answered is: 'What is the probability that the second cipher letter 
would be observed, subject to the condition that the first letter has 

_ been observed ?" Since we have, or can calculate the a priori 

probabilities for plaintext, Bayes' Theorem may be used to calculate 
the probability needed to answer this question, It is applied in the 
following way. ©), the first letter of a digraph, can occur only in 
combination with one of m events O71 O220 6 <0 6s ©2m> any two of 
which are mutually exclusive (they are the letters A, B, ....., Z). 
Let us write 


P(82;)= MG » P(6}/©2;)= py (i= 1,2,,...,m) (1) 


By applying the general addition and multiplication rules of probability 
theory we obtain 


P(©1) = 771P1+ M2P2 +... + MPi (2) 
and hence 


P(@;{9)) = Hpi i) 
FYAP1 +972P2+ +--+ + TPiPi 


Formula 3 is known under the name of Bayes' Theorem, and was 

used to calculate the probabilities given in the appended tables, The 
formula is an expression of the conditional probability of a specified 
second letter, calculated under the hypothesis that we have observed 

the occurrence of the first letter, Suppose, for example, we calculate 
the probability that U follows Q, once the Q has been observed, Accord- 
ing to the formula we find 


NS 


~ 


Tables of the conditional probabilities of sequent plaintext lettera 
calculated by Bayes' Theorem are presented in Tables 1 through 6, 
inclusive, 

As previously mentioned, the correct total probability for a series 
of independent events is the product of the individual probabilities, 
Since the logarithm of a product equals the sum of the logarithms of 
the numbers being multiplied, and since the larger the logarithm the 
larger the number, adding logarithms to produce a figure of merit is 
a}suitable scoring procedure, For convenience, a base for the log- 


_ ayithms was chosen such that the digraph with the highest probability 


has a relative logarithmic probability of 0.99, The base is calculated 
from the following formula 


_| B*Antilog(Ln 2000 P,,,,/0. 99) )) 


The relative logarithmic probabilities given in Tables 7 through 12 
are then computed from yak 


Log, P= Ln P/ LnB (See footnote) — | (7) 


As an example of the use of the tables, let us re-examine the 
problem considered earlier, It may be noted that the correct juxta- 
position of the columns is number 11, Using the method of Baudoin 
and Gaines this one has the lowest score, Below the correct method 


described in this paper is applied to the same digraphs. The scores 
were chosen from Table 16 
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Since the logarithm of.zero is undefined, the value 0. 0005 has been 
inserted whenever zero probability was encountered, This value is 
approximately one-half the lowest Probability value noted, 


It would be nice to report that the method described herein: 


automatically | made the correct selection, 


Unfortunately, this is 
not the case, 


But, in spite of the rvetsity of the text, the correct 
bee canes ow has at least received the second highest score, 
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